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INTRODUCTION 

If there is one constant in business, it is the change. As we 
strive to become more efficient and improve the quality of 
our products, we constantly change industrial processes. 
The change may be in the field, in the control system, in 
the user interface, or even in the information systems that 
roll all the way up to the board room and direct the produc- 
tion plan. 

As we tweak our processes, we also invent new and bet- 
ter technology tools. The single instrument and single loop 
controller became the distributed control system (DCS). And 
these systems interfaced with the business systems and other 
facilities to provide global real-time pricing models. And 
now, the cycle seems to be shifting back to the field with fan- 
cier single loop controllers that do much of what is in the 
modern DCS as standalone devices. And the pace of technol- 
ogy change seems to only accelerate. 

Compounding this is the reality that much of the early 
DCS hardware is no longer manufactured and has been for- 
mally made obsolete by the DCS vendors. There are a few 
parts and pieces that are still available, but most industrial 
sites that have been in production for decades have already 
completed a plant upgrade or contemplating one. 

As the DCS vendors have moved to the open system 
architecture, many of the industrial systems are running on 
relatively generic servers and personal computer platforms. 
These generic hardware platforms only show an increased 
tendency in time to leapfrog every few years and require 
frequent hardware refresh cycles and software patches. The 
benefits of interoperability and a wide variety of tools are 
generally felt to outweigh the overhead in both hardware and 
software. However, the bottom line for operating in the open 
systems environment versus a proprietary vendor platform is 
that upgrades are a perpetual part of industry. 

Amid the potential chaos of all this change, the process 
control industry had to become very proficient at managing 
and preparing for change. One cannot control something 
not measured or inspected, which is the role of the audit. 
Auditing for compliance with standards and management of 
change protocols is a key input to performing upgrades. 


PREREQUISITES TO AUDITING: GOALS, 

FUNCTIONALITY, STANDARDS 

There is no one right way to perform an audit, no single 
master checklist of things to assess and document. The key 
to performing the best audit for the situation at hand is to 
understand the goals, functionality, and standards related to 
the audit. 

It is important to note that audit has become an increas- 
ingly common work process in the industrial setting. In 
highly regulated industries (pharmaceuticals, nuclear, etc.), 
the audit and other qualification and validation requirements 
are significant. In less regulated industries, it is common 
to see ISO and other external group certifications, which 
require auditing. 

Additionally, over the last 20 years or so the Project 
Management Institute and the Construction Industry 
Institute have both published standards and guidelines that 
have embedded audit work processes. There are many books 
devoted to the subject of auditing for all of these varied 
requirements. 

Certainly, some consideration of auditing against indus- 
try best practices and/or standards is a possible value addi- 
tion to any audit. However, if a company is performing an 
upgrade on a process that is not required to follow a given 
external standard, auditing against that standard may be a 
cost and schedule delay that does not provide the information 
needed to proceed with the current project. Thus, it is impor- 
tant to focus on the task at hand and provide the information 
that is useful to achieve the goals and functionality of the 
intended project, while following the facility standards. 

Goals 

The importance of focusing on project goals and the relevant 
company goals and initiatives in order to determine the type of 
audit conducted cannot be overstated. Since an audit is gener- 
ally performed by someone other than the process owner, the 
tendency may be to rely on the auditor to independently deter- 
mine the methods and scope of the audit. A corporate policy 
audit across several processes or facilities can be successful 
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in this mode of operation. However, a project-related audit 
must be grounded in the scope of the project itself. 

The audit of an existing plant for upgrading should 
always have a specific, stated goal. The following are some 
likely general goals for the project: 

• Reduce variation of product 

• Increase throughput 

• Increase reliability 

• Avoid obsolescence of the system infrastructure 

• Adhere to safety or environmental regulations 

• Reduce maintenance costs 

• Decrease manufacturing changeover or process modi- 
fication time 

The specific type of audit selected will vary with the goals 
noted and will be discussed below. 

Functionality 

The industrial world is changing very rapidly. Whereas in 
the past an operator interface device might be a panel with a 
gauge and push buttons, today the operator interface device 
is likely to be a wearable computer. And a single level gauge 
in the past might have only been of interest to the operator, 
but today this information is available in real-time even to 
a sales person on another continent who is deciding which 
of several facilities will be used to fulfill a last minute rush 
order for a product. 

Thus, it is important to understand what the functional 
needs are for all users of the system. These user needs can be 
gathered in a variety of ways, from simple questionnaires and 
interviews to more detailed task analyses. The users should 
be classified into primary and secondary users. Common 
users to consider include: 

• Console operator 

• Outside operator 

• Operations team leader 

• Training staff 

• Instrument/electrical technician 

• Analyzer technician 

• Maintenance foreman 

• Operations manager 

• Support engineers 

• Environmental compliance personnel 

• Application engineers 

• Accountants, etc. 

It is important to note that some of these users are likely 
to only use data from the related historian. However, their 
needs must be considered in defining the scope of the project 
and the types of audits conducted. When conflicts arise, it 
is important to maintain the integrity of the primary users 
needs. Since some of the functional needs will likely be in 


conflict, it is important to also document the relative impor- 
tance and payback of each functional need. If the audit is 
used to document this functional basis, it can provide critical 
information into the final business case related to the project. 

It is more common that the audit is used to verify the qual- 
ity of information that is used to drive the design basis and 
schedule. This provides a check on the technical feasibility 
and helps to identify risks in both the design and the schedule. 

In process control and automation projects, the functional 
needs considered should address: 

• Process measurement 

• Final control elements 

• Input/output system wiring 

• Control needs 

• Network needs 

• Redundancy, robustness, and availability 

• Backups and spare parts 

• Operator interface needs 

• Operator training needs 

• Alarm handling needs 

• Historical process data needs 

• Regulatory information needs 

• Business information needs 

• Scheduling needs 

• Maintenance needs 

Facility Standards 

Industrial facilities generally establish and maintain a list 
of preferred components that have the functionality needed 
to achieve plant and project goals. These components have 
been tested at the current patch levels of all related soft- 
ware. Additionally, facility personnel have been trained in 
the operation and maintenance of these devices. In terms of 
the upgrade project, it is important to field verify that the 
components in place match the list of preferred components, 
in order to determine what components need to be tested for 
functionality and interoperability. 

If facility standards are not present, it should be recom- 
mended that the project create these standards as part of the 
project effort. Standards are useful to set a general direction in 
the components and ways a facility will try to meet company 
and plant goals and avoid obsolete components. Other common 
uses of a standard is to establish better vendor relationships, 
minimize spare parts, minimize decision making, minimize 
training costs, and ensure consistent and predictable results. 
Few plants can justify the capital financing or the production 
downtime to replace components across the facility when new 
devices become available with needed functionality or when 
new industry trends and standards are established. Innovation 
must be integrated into the facility. The plant standard should 
lead in setting the direction to keep the components from 
becoming obsolete and promoting devices that will better sat- 
isfy the functionality desired. 
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When should the existing standards be reviewed and modi- 
fied? The answer is more often than is done for most plants. Any 
of the following events signal a time to review plant standards: 

1. The manufacturer announces a discontinuation of the 
product 

2. An organizational or industry standards committee 
selects another standard 

3. The plant is planning a major expansion or revision 

4. A problem of service develops with established ven- 
dors or manufacturers 

A final word concerning standards is to guard against using 
the “standard” to thwart innovation that meets the function- 
ality of its intended use and achieves company or project 
goals better, faster, or cheaper. 

AUDIT STAFFING CONSIDERATIONS 

An audit is only as good as the data provided and the team 
involved in the audit. As such, it is important to both select 
the best personnel for the audit and provide them with tools 
to support their efforts. Data should be made freely available, 
leaving much of the quality to the team staffing. 

The person, or group, conducting the plant audit and pro- 
viding information and making recommendations should have 
the time to dedicate to doing a thorough examination of the 
existing systems, experience in evaluating and making appro- 
priate recommendations to resolve the specific type of prob- 
lems faced in the audit process, and ability to write a report that 
will show the value of implementing the recommendations. 

Table 45.1 is a subjective chart showing a rating of the 
qualifications of the persons who regularly conduct such 
work. The chart shows the ranking of the various people on 
a scale of 1-5, with 5 being the best. The categories on the 
chart are explained below. 

Plant engineer: A technical person at the plant with 3-7 
years automation experience. 


Corporate engineer: A senior level engineer who travels 
between various plants providing technical troubleshooting 
and project support. 

Vendor: A technical sales support engineer who might 
be called to assess the existing systems and make 
recommendations. 

Engineering firm: An outside engineer from a firm that does 
detail engineering and project management. 

Consultant: An individual with extensive technical back- 
ground and experience who is a specialist in that process 
industry or is an expert in the technical area of the upgrade 
project (this could be an internal or external resource). 

These types of people are then ranked on several key 
attributes: 

1 . Process knowledge: Knowledge of the plant process in 
the area of the audit 

2. Plant knowledge: Understanding of the plant, goals, 
systems, and personnel 

3. Industry knowledge: Understanding of the business, 
regulations, projects, and trends for that process 
industry 

4. Problem resolution: Capability of determining equip- 
ment and system changes that will resolve the techni- 
cal problems and add the functionality that the audit 
reveals 

5. Time: The dedicated time to study the problem, deter- 
mine resolution, and write reports 

6. Experience: Generic estimate of the experience each 
has in this type of audit and problem resolution 

7. Influence: Assessment of the capabilities of the person 
or group to have the recommendations implemented at 
the plant 

8. Cost: The cost of the audit 

9. Project cost: The degree to which the auditor will work 
without bias on the company’s behalf to gain return on 
investment and save capital money on the project 


TABLE 45.1 

Chart Showing a Subjective Ranking of the Relative Strengths of Persons Who 
Might Perform a Plant Audit 


Key (5 is best, 1 is 
worst ) 

Plant 

Engineer 

Corporate 

Engineer 

Vendor 

Engineering 

Firm 

Consultant 

Process knowledge 

5 

4 

3 

4 

4 

Plant knowledge 

5 

5 

3 

4 

4 

Industry knowledge 

4 

4 

3 

4 

5 

Problem resolution 

2 

3 

4 

4 

5 

Time 

2 

3 

2 

5 

5 

Experience 

3 

4 

3 

3 

5 

Influence 

2 

3 

2 

5 

5 

Cost 

4 

3 

5 

2 

1 

Project cost 

3 

4 

2 

3 

5 
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Unfortunately, there is no efficient way to transfer the knowl- 
edge and experience of the outside expert to plant personnel. 
Even if the plant has a technical person with the time and 
experience to adequately examine and evaluate systems, that 
person may not have the political influence to be the catalyst 
for change that is needed to convince the plant to implement 
the recommendations. 


AUDITING FOR UPGRADING EXISTING PLANTS 

Once the basic goals, functionality, and standards are known, 
it is important to put together an audit plan and select the type 
of audit to perform. When auditing for upgrades, it is impor- 
tant to determine the type of upgrade planned, its scope and 
the plan for migration of existing functionality to the new 
system. 

Types of Upgrades 

In the simplest terms, upgrades can be split into three types: 
hardware, software, and hardware/software. 

Hardware will include but not restricted to the followings: 

• Workstations 

• Servers 

• Controllers 

• Network devices 

• Domain controllers 

• Field I/O hardware 

• Wiring 

• Fiber networks 

Software can include 

1. Operating system 

2. Control system 

3. Other control system applications 

4. Other layered applications 

5. SIS system 

6. PLCs 

7. I/Os 

8. Vendor packaged equipment 

It is recommended that for each type of hardware and soft- 
ware upgrade; a work process be developed that includes the 
type of pre-upgrade audit checklists, the functionality sup- 
ported, and the testing, qualification, validation, and training 
required. 

SCOPE OF UPGRADE AND MIGRATION METHOD 

The scope of the upgrade must be determined in order to plan 
the audit. For an automation project, the instrument database 
and the piping and instrumentation diagrams (P&IDs) are 


often the key master documents. But it is also important to 
place these changes (deletions, modifications, and additions) 
into the context of the overall type of scope. Scope types 
include the following: 

1 . Replacement in kind 

2. Evolutionary change with same vendor 

3. Technology refresh with same vendor 

4. Major change with same vendor 

5. Vendor change 

Replacement in kind: A simple replacement in kind after 
some form of failure can be straightforward. However, this 
type of project is relatively rare. This could in effect be 
simple system maintenance. However, an examination of 
the goals, functionality, and standards may indicate a new 
for an incremental upgrade to meet, for example, goals for 
growth, desired functionality or to conform to a standard. As 
an example, if a given card has a failure and it is no longer on 
the facility standard list, it may make sense to move to a new 
card type and perform the engineering to ensure a smooth 
transition for all of the instruments impacted by that card 
change. So, even with simple projects, it is important to audit 
as part of the initial design. 

Evolutionary change with same vendor: In the example 
above for replacement in kind, it may be that the desired 
maintenance repair is not possible. It may be that the parts 
required are obsolete and simply not available. This might 
lead to the recommendation for an evolutionary change, 
replacing with the new part providing the same functionality. 
With this technology change, it is particularly necessary to 
understand the functionality needs and ensure that the new 
system can provide these needs. It is not uncommon for parts 
of older functionality not commonly used to not be supported 
in newer systems. At times, these discrepancies are not 
spelled out explicitly in vendor documentation. Any mission 
critical devices should be tested in a development system or 
offline manner to ensure smooth upgrade. If vendor testing is 
used in place of project testing, care should be taken to verify 
that all desired functionality was included in vendor testing. 

Technology refresh with same vendor: Technology refresh 
is a term commonly used to discuss the periodic need to 
replace certain types of hardware and software in order to 
avoid obsolesce or to maintain leading edge performance. 
In modern open control systems, this is commonly required 
with the workstation and server hardware. One justification 
for redundant servers is to allow for the relative ease of this 
server technology refresh. Workstation counts also generally 
reflect the need to be able to take one station out of service at 
a time in each location without any disruption to operations. 

Major change with same vendor: When the technology 
refresh methodology is not chosen, it may become necessary 
to periodically undergo a generational change with the same 
vendor. This type of change is relatively common in older 
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systems. The functionality of the old versus new system must 
be rigorously tested, either by the project or the vendor. Plans 
to maintain enough similarity between the old and new sys- 
tems, in order to maintain smooth operator response is impor- 
tant. If similarity is not practical or desired, it is important to 
plan for extensive operator training on the new system before 
it is placed into operation, unless an increase in process upset 
or outage due to operator inexperience is not an issue. 

Vendor change: A vendor change is perhaps the most extreme 
type of change in an upgrade. As with the major change with 
the same vendor, the concerns with existing functionality, 
operator familiarity, and training apply. New systems gener- 
ally have a different look and feel in the operator interac- 
tion and troubleshooting. Though, they can be made to look 
familiar with custom interfaces. 

As the scope is determined, so must the migration method 
be determined. Migration methods include the following: 

• Hot 

• Warm 

• Cold 

• Green 

Hot: In a hot or online migration, the process will continue to 
operate during the change. 

Warm: In a warm migration, the process will move to a safe 
state intermittently as needed during the change, but is gener- 
ally kept online. 

Cold: In a cold migration, the process will be shutdown prior 
to the change and restarted on the new system. 

Green: In a green migration, a new addition is being made 
to an existing process and being commissioned for the first 
time. 

If the wiring for an existing loop is disturbed, then the 
plan for verification at cutover must be set. The most com- 
mon type of verification is a loop reading on the old system 
compared with a reading and, where applicable, final element 
movement on the new system. This comparison of the old 
and new verifies the loop and continued functionality, when 
combined with test signals at set points in the range. If this 
comparison of old and new is planned, then all bad devices 
must be repaired prior to or during the cutover. A field audit 
of devices can identify issues requiring repair before upgrade. 

Determining the type of cutover may seem at first 
thought to be of no importance to the type of audit per- 
formed. However, if a hot cutover is planned, it is impor- 
tant to check on all final elements for functioning bypasses. 
A good example is the valves, it is important to check for 
bypass valves and block valves, including ease of access and 
the condition of this bypass equipment. If a complete bypass 
is not available, then the valves themselves should be exam- 
ined for options for operation at a fixed output, either from 
the valve or the terminations. Fixed-output devices can be 


mechanical (stop blocks or stop screws) or electromechani- 
cal (output stations). If the cutover is planned to be cold, it 
is likely not to necessarily audit for the bypass states of the 
final elements. 


TYPES OF AUDITS 

As was noted above, the first steps in preparing for an audit 
are to determine the details of the project. Once there is an 
understanding of the specific type of upgrade, its scope, 
and migration method, then the types of information to be 
audited can be determined. 

The following list provides some of the most common 
audit types: 

1. Field devices to P&IDs 

2. Field devices to control databases (DCS, SIS, PLC, 
etc.) 

3. Field devices to enterprise asset management (EAM) 
systems 

4. Field devices to loop folders 

5. Regulatory recordkeeping to field devices 

6. Control system tags to human machine interface (HMI) 

7. Control system to enterprise resource planning (ERP) 

8. Control system tags to manufacturing execution 
systems (MES) 

9. Field devices 

10. Control system components 

11. Control system topology 

12. Network components 

13. Network topology 

14. Firewalls 

15. User accounts 

16. Workstations 

17. Other console devices 

Field devices to P&IDs: This audit performs a field survey 
and verifies the accuracy of the P&IDs. This step is often 
performed periodically in the industrial setting as part of 
other programs. If the field survey audit is not performed, 
it is important to recognize the possible inaccuracies in the 
P&IDs as part of the project risk management plan. In cases 
where hot cutovers are planned, it is recommended that a 
modified field survey still be performed as part of generating 
the detailed cutover plans. This survey includes an examina- 
tion of all bypasses and requires specific plans for all systems 
without bypasses. 

Field devices to control databases (DCS, SIS, PLC, etc.): 
In some cases with older plants, there may be devices aban- 
doned in place in the field or in the control database that do 
not need to be migrated. At times, as much as 30% of an 
existing system may not be migrated, so this can be a large 
cost savings, to identify in an early audit what systems should 
be removed from service formally. 
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Field devices to EAM systems: With more modern systems, 
there are many data connections from the field or control 
system up to systems in the business layer. The maintenance 
management system is one such example. Care should be 
taken to ensure that any items that will be deleted, changed, 
or added are properly identified and work processes identi- 
fied to ensure that the proper updates are applied. 

Field devices to loop folders: In many facilities, it is still 
common to have a paper loop folder system. It is important 
to determine the relative accuracy and availability of these 
documents. As part of the audit, recommendations should be 
made on how to best use and update this type of information 
source. 

Regulatory recordkeeping to field devices: Increasingly, var- 
ied regulatory agencies have strict record-keeping rules. It 
is important for an upgrade project to understand the spe- 
cific information needs related to regulatory tags. In some 
cases, no loss of data is allowed, so extreme care and alter- 
nate means of recording data may be required. The scope and 
severity of these requirements should be explored in the audit 
and recommendations should be made on how to best meet 
these requirements. 

Control system tags to HMI: As older systems evolve, there is 
a tendency for some of the tags to become hidden from plain 
operator view. As part of the audit, all tags in scope should be 
examined to determine if they are being displays appropriate 
to standards. Any tags with issues should be identified in the 
audit and recommendations should be made on how best to 
resolve any issues. 

Control system to ERP: With more modern systems, there 
are many data connections from the field or control system 
up to systems in the business layer. The ERP system is one 
such example. Care should be taken to ensure that any items 
that will be deleted, changed, or added are properly identi- 
fied and work processes identified to ensure that the proper 
updates are applied. 

Control system tags to MES: With more modern systems, 
there are many data connections from the field or control 
system up to systems in the business layer. Care should be 
taken to ensure that any items that will be deleted, changed, 
or added are properly identified and work processes identi- 
fied to ensure that the proper updates are applied. The most 
common systems in the MES layer are the historian, yield 
accounting, and cost accounting. 

Field devices: In some types of upgrades, it may be neces- 
sary to audit field devices themselves, creating a list of all 
major types of instrumentation (24, 120 V, etc.), model num- 
bers, and accessories present. Any special situations should 
also be noted, including critical loops powered with special 
“critical’' power panels or devices that require power to trip, 
etc. In performing major upgrades, it may also be desirable to 


examine the field components and consider changes to move 
advanced technologies with smarter field devices. In projects 
involving changes to the field wiring, it is likely important to 
understand the hazard classification, physical condition of the 
wiring, and localized spare capacity and power availability. 

Control system components: In some types of upgrades, 
some obsolete hardware must be retired. In these situations, 
all component parts must be examined and replacement 
upgrade parts identified. For critical and non-redundant sys- 
tems, special migration plans may be required. 

Control system topology: In some types of upgrades or with 
control system network additions, the system topology and 
loading must be understood. In these situations, all network 
drawings should be field verified and component loading 
assessed. 

Network components: In some types of control system or net- 
work upgrades, some obsolete hardware must be retired. In 
these situations, all component parts must be examined and 
replacement parts identified. 

Network topology: In some types of network upgrades and in 
cases of network additions, the network topology and loading 
must be understood. In these situations, all network drawings 
should be field verified and component loading assessed. 

Firewalls/domain controllers: In some upgrades, a connec- 
tion to or from a non-control system resident device might be 
required. This may require changes to firewall rules. In these 
situations, an understanding of the current firewall rules and 
related information technology policies is required. It is also 
important to understand which workgroups have responsibil- 
ity for these areas in order to plan the project and identify 
organizational risk. 

User accounts: In some types of upgrades, there may be 
some impact to local or domain accounts. In these situations, 
it is important to understand the current configuration and 
related information technology policies. It is also impor- 
tant to understand which workgroups have responsibility for 
these areas in order to plan the project and identify organi- 
zational risk. 

Workstations: In some types of upgrades, changes to the 
workstations may be required. It is important to understand 
the current workstation design and to audit for consistency 
between workstations. The audit should include both operat- 
ing and application software, as well as user preferences. It is 
also important to understand which workgroups have respon- 
sibility for these areas in order to plan the project and identify 
organizational risk. 

Other console devices: In some types of upgrades, it is 
important to understand all of the peripherals installed in 
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the console. This includes all LAN PCs, telephones, radios, 
intercoms, camera systems, printers, wall monitors, and shut- 
down and bypass buttons. It is also important to understand 
the functional needs in these systems, which may be inad- 
equate and poorly documented. 

Note: It is important to only audit the items that are required. 
The only way to determine if the upgrade to the existing 
systems is a good financial decision is to audit the existing 
systems against the functionality needed to achieve company 
and plant goals. 

CURRENT OPERATION PERFORMANCE 

Upgrade projects are generally supported to either allevi- 
ate concerns regarding infrastructure obsolescence, to per- 
form a technology refresh or to add new technology to solve 
a specific problem. In all of these cases, it is important to 
survey all items in the scope of the project and determine 
if they are currently functioning well. Even in the best in 
class systems, there are a few items that are not performing 
well. In order to avoid project delays in implementation, it 
is important to identify areas of poor process performance 
during the initial audits. 

The following checklist provides an indication of current 
poor performance: 

• Controllers commonly in non-normal mode (MAN or 
AUTO in a cascade) 

• Excessive manual operation, where automatic controls 
are configured 

• Periodic or seasonal fluctuations in controllability of 
the process 

• Fast process transients and oscillations while in 
manual mode 

• Control valves that are generally saturated (close to 
full open or full closed) 

• Alarms are known to chatter on specific devices 

• Alarms are not enabled, but are configured 

• Excessive process equipment and control component 
failures 

System Redundancy and Availability 

System diagnostics and redundancy, like process information 
and system integration, is an area that the auditor may under- 
stand better than the plant personnel. So too, the auditor mak- 
ing recommendations for upgrading systems should include 
recommendations on the system diagnostics and redundancy 
even when the functional specification does not address the 
issues. System diagnostics begins with the transmitters and 
final control elements in the field. Smart transmitters, valves, 
and a device network are the basis for a system to alert per- 
sonnel of process and instrument problems and provide the 
diagnostics to isolate the problem. 


Auditing for Upgrading Control Rooms 

When considering a change to the control room or control 
building, it is critical to know the long-term goals of the orga- 
nization and how that impacts the immediate and longer term 
functionality. 

Many of the key audit considerations regarding incre- 
mental upgrades to the control room itself were noted above, 
focusing on console and workstation impacts. If a major 
upgrade is planned, it is important to consider the function- 
ality of the control room or building itself, including what 
types of rooms are required, environmental issues, and the 
design of the console itself. 

A key consideration in the design should include an 
understanding of the communication needs of the operations 
team under all modes of operation. This can include a task 
analysis to determine requirements. It can also be useful to 
review of related operations work practices and policies. 
Types of rooms to consider include the following: 

• Control room with consideration of limited access/ 
traffic patterns 

• Marshalling and other I/O needs 

• Control system (servers, etc.) 

• Business system (LAN, support for PCs, printers, etc.) 

• Environmental equipment (air conditioning support, 
air quality analysis, and isolation methods) 

• Offices for key operations team members (operations 
management, engineers, instrument support, analyzer 
support, mechanical maintenance, and administration 
staff) 

• Storage for critical paperwork and supplies 

• Meeting rooms 

• Rest areas/break room 

• Exercise facilities 

• Kitchen facilities 

• Change room with storage, etc. 

Environmental considerations include: 

• Air quality 

• Air conditioning 

• Lighting 

• Static 

• Sound management, etc. 

Additionally, it is important to consider the functional work 
processes of the personnel located in the control room, which 
include operations, routine and crisis maintenance, and 
technical support. Key items to consider are traffic flow in 
and out of the control room operating area, meeting rooms, 
offices, etc. 

The console design includes the design of the worksta- 
tions, local storage, as well as the supporting communica- 
tions infrastructure, which includes the following: 

• LAN PCs 

• Telephones 
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• Radios 

• Intercoms 

• Camera systems 

• Printers 

• Wall monitors 

• Shutdown and bypass buttons 

The console itself should be designed with ergonomic best 
practices, including consideration of adjustability to sup- 
port people of differing height and reach, best eye angles for 
normal vision and color perception (including support for 
multi-focal lenses), and the ability to operate from a sitting or 
standing position. 


AUDITING FOR UPGRADING NETWORKS 

Many of the key audit considerations regarding upgrades to 
the network were noted above, focusing on network topology, 
components, user accounts, and domain controllers. Network 
management in the automation environment is new to some 
companies. Care must be taken to ensure that the design is 
sound and that network loading is managed well. This may 
require significant retraining, the addition of staff or the use 
of external resources. 
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